Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File:                     xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier:          /n2b/kgp4+koejeUygnGHNwZukapVVa8l5HQEFf53J0=
Subject key identifier:   D2:78:EE:1D:FB:8D:29:2C:F9:7A:51:FF:D7:EE:2C:3F:EE:E8:59:DE
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer:       /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial:       029C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number:          029B
Signing time:             Wed 17 Sep 2025 03:56:16 +0000
Manifest this update:     Wed 17 Sep 2025 03:56:15 +0000
Manifest next update:     Fri 19 Sep 2025 03:56:15 +0000
Files and hashes:         1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: QcxdKyE3xo+1djyAG01N0H8X+3riBQqQK2rBhoiDaBs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
        Validity
            Not Before: Sep 17 03:56:15 2025 GMT
            Not After : Sep 19 03:56:15 2025 GMT
        Subject: CN=68ca3160-ae3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:58:e2:e9:28:c5:72:1e:6b:07:01:5f:28:
                    73:c0:17:6c:1a:08:24:7b:e3:a6:96:45:af:21:0b:
                    ec:95:1d:86:65:fb:85:26:b6:32:a6:36:e6:7a:f2:
                    a7:6e:f4:68:65:3f:53:b6:cc:fe:d9:26:0a:b0:ac:
                    1c:ed:ae:c2:81:cc:bb:45:21:8b:bd:7a:29:75:f8:
                    3c:f8:3f:16:58:5c:d1:cb:2b:90:1a:86:b9:cc:2e:
                    8d:ae:ca:81:be:47:5e:8a:49:da:4b:03:56:82:e5:
                    b4:ca:07:08:d8:00:59:9f:40:ee:f1:a3:c9:76:d2:
                    fa:8a:f1:d5:7b:b8:85:9c:73:cb:a5:1f:6d:a2:43:
                    b0:87:3a:f8:f2:5c:a8:d9:28:66:1a:6f:52:88:cb:
                    79:e6:67:07:a4:ab:04:52:a6:f4:7b:26:4c:c5:43:
                    23:b0:5a:53:98:4b:32:14:2d:1e:ea:58:89:ac:50:
                    31:7c:14:35:a4:3f:68:60:ad:5b:9f:cb:39:18:f8:
                    5c:7d:e4:38:12:da:62:cf:88:0e:d6:a0:09:db:84:
                    5b:17:ce:a4:92:9d:a2:dd:5b:30:01:d0:6b:fd:6d:
                    f1:bb:42:75:ff:c2:b2:2e:b5:15:49:5d:36:bc:d2:
                    49:be:89:14:8e:1f:83:89:5a:ab:c7:4d:d6:30:72:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:78:EE:1D:FB:8D:29:2C:F9:7A:51:FF:D7:EE:2C:3F:EE:E8:59:DE
            X509v3 Authority Key Identifier:
                keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0b:50:0e:c9:88:c0:37:f7:2f:41:ee:ec:98:d7:13:2e:35:
         a5:67:2b:03:05:6d:f3:74:ab:5e:ff:8b:79:09:fb:78:52:f5:
         9a:13:26:66:96:27:2b:5b:4a:74:fa:00:88:0f:f2:cc:71:12:
         a8:1e:17:0d:48:a9:7a:a7:c6:26:7e:62:2b:07:8f:be:92:d4:
         9f:16:9c:57:78:04:b6:64:70:77:07:87:93:9c:f4:f1:51:2d:
         32:cf:7c:b1:59:67:ed:7e:da:b9:d3:a7:41:95:16:ca:42:54:
         03:b9:32:b1:ce:c8:23:e6:09:11:39:4d:63:7c:54:84:19:8e:
         17:11:5a:15:64:86:cd:29:f5:7a:05:e3:c3:19:29:1f:ac:49:
         05:f0:d1:d9:1f:d4:dc:fc:60:35:3d:6e:aa:c6:97:b2:23:00:
         9b:3c:8b:1a:22:eb:a7:db:2e:49:ee:ea:4f:48:77:0d:7c:4a:
         9c:f2:bc:21:71:9f:0b:b5:da:07:87:2a:cd:cb:eb:3e:e2:94:
         17:6e:b7:5a:87:83:a4:fe:b2:af:62:3c:a3:7d:e4:de:4a:e3:
         30:34:57:55:10:e2:dd:9d:a8:86:3f:cb:96:6e:13:03:ac:96:
         83:0b:97:e0:34:78:6f:fd:66:a5:c6:0c:44:81:7f:69:95:e1:
         2a:94:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:40:34 2025 by rpki-client